Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: I1ALXg8vl2RZnrE/U1Y0tsMd7wte0luF5b5Px/cxAFw=
Subject key identifier: 05:86:EB:75:7B:1E:9E:4B:25:91:66:83:00:02:D4:AB:45:56:2C:97
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 01A13E2599CC144E51FD42B10FDFD782B953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 08ED
Signing time: Thu 15 Oct 2026 06:00:13 +0000
Manifest this update: Thu 15 Oct 2026 06:00:13 +0000
Manifest next update: Fri 16 Oct 2026 06:00:13 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: 3OZqsYD+WniNGLg9sohi49pwH5SJwFNuR1U3b0OYhdk=)
2: Ip878u9pBQi9g89YkISpQa7bCf0.roa (hash: 5w9cx6mrV87FtSruYjnPB/haPzCFoJHrmqiObhlSqk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:99:cc:14:4e:51:fd:42:b1:0f:df:d7:82:b9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: Oct 15 06:00:13 2026 GMT
Not After : Oct 16 06:00:13 2026 GMT
Subject: CN=0586eb757b1e9e4b259166830002d4ab45562c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ce:b6:82:aa:2a:b5:46:c1:22:85:76:87:7c:
60:b1:42:b6:b4:af:e0:46:17:18:99:5c:62:68:2d:
31:c5:06:78:77:e7:91:9b:0b:f1:6a:01:6b:36:28:
d8:f1:88:65:7c:23:2c:dd:2c:cf:57:bb:2c:7d:8e:
04:36:34:48:cd:5b:2e:71:05:b7:c1:79:e7:9f:98:
ce:81:1c:22:de:7b:0e:bb:8b:d0:d4:62:34:ab:75:
f5:8a:58:29:23:d1:e2:38:78:dd:a7:e2:12:0e:68:
ec:a7:24:3e:85:d7:8c:89:8f:24:9f:57:a5:1e:ec:
cc:92:98:55:99:47:63:27:9e:22:77:f8:f1:67:ae:
3e:6a:99:3d:67:05:dd:70:21:67:b7:36:38:3b:e8:
88:ac:b2:60:e7:fe:7d:c4:75:9a:85:0a:0a:42:7f:
56:fc:c9:03:d4:5a:61:42:b9:f2:0c:b5:4b:41:e1:
d8:41:c3:5b:e6:f2:e7:d1:7e:0b:5d:c8:0d:9d:5b:
dc:74:bf:46:3f:67:b1:50:8b:08:61:0a:e4:4f:08:
3e:8a:9d:0f:43:05:5f:b9:11:a5:1c:13:22:2b:07:
36:dc:98:d5:34:fe:7e:cc:ed:60:1c:61:9b:a7:b4:
aa:31:ab:c4:5e:2b:48:45:37:eb:06:f9:5a:37:9f:
1a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:86:EB:75:7B:1E:9E:4B:25:91:66:83:00:02:D4:AB:45:56:2C:97
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4b:cd:dd:28:5b:bf:3e:cf:7c:52:75:3f:dd:3e:4a:ad:78:
f9:46:fe:3f:f9:b5:0d:51:35:26:b6:22:c2:f1:16:fc:12:c3:
33:81:8d:bc:71:49:0c:de:62:e4:4e:4e:a1:ed:e4:9d:28:ce:
24:61:03:22:07:dc:e3:70:25:82:24:65:29:b8:ab:d7:50:2c:
f0:14:c9:c5:d3:27:eb:33:9a:7f:44:42:05:b7:a8:a4:ff:7f:
95:5c:7f:7f:d2:d1:99:b3:d3:e2:b9:f5:8e:7d:c1:74:e2:29:
84:b2:6e:23:ae:05:dd:5f:a3:21:2c:a0:e9:73:82:a2:66:49:
33:e9:ab:54:8a:7f:9e:51:c2:33:ea:6c:77:4e:53:f5:4b:c6:
fc:46:d7:4e:0c:46:ae:b7:bd:22:a4:e8:b7:ee:ec:80:2c:47:
d8:c5:5c:89:e7:5a:56:c3:55:cd:df:a6:50:e7:da:bb:c9:45:
a2:2e:99:9e:54:62:54:14:ae:f7:cc:06:80:4f:f6:02:e8:54:
0f:7f:a2:e2:0c:6d:9a:bb:90:24:aa:86:2d:b2:53:9d:13:a8:
9a:df:bf:1a:d0:1e:46:fe:15:16:d6:df:15:13:2d:9d:ad:5d:
cf:a1:41:0a:f4:de:1c:5b:62:db:5d:18:2d:4a:6a:f2:af:89:
61:6e:d0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:21:56 2026 by rpki-client